CVE-2017-11346

Zoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute arbitrary code via vectors involving the upload of help desk videos...

Design/Logic Flaw

Zoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute arbitrary code via vectors involving the upload of help desk videos...

Zoho ManageEngine Desktop Central Arbitrary Code Execution Vulnerability

Zoho ManageEngine Desktop Central DC is a desktop management solution from Zoho. The solution includes software distribution, patch management, system configuration, remote control and other functional modules to support the entire lifecycle of desktop and server management. A security...

CVE-2017-11346

This CVE affects ManageEngine Desktop Central, where the FileUploadServlet allows remote code execution due to insufficient validation of the user-supplied fileName parameter during file uploads (notably for HelpDesk_video and related actions). The vulnerability enables an attacker to place a mal...

CVE-2017-11346

Zoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute arbitrary code via vectors involving the upload of help desk videos...

Zoho Chat - Team Communication - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Zoho Chat - Team Communication published at the 'play' market has multiple vulnerabilities...

Zoho Desk - Corrupted files, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Zoho Desk published at the 'play' market has multiple vulnerabilities...

Zoho Mail Admin - Corrupted files, Customized SSL, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Zoho Mail Admin published at the 'play' market has multiple vulnerabilities...

Design/Logic Flaw

Zoho ManageEngine Desktop Central before build 100082 allows remote attackers to obtain control over all connected active desktops via unspecified vectors...

CVE-2017-7213

Zoho ManageEngine Desktop Central before build 100082 allows remote attackers to obtain control over all connected active desktops via unspecified vectors...

CVE-2017-7213

CVE-2017-7213 affects Zoho ManageEngine Desktop Central. In builds before 100082, an unauthenticated, remote attacker can obtain control over all connected active desktops via unspecified vectors. Multiple sources describe a remote elevation/privilege scenario enabling remote control of managed d...

CVE-2017-7213

Zoho ManageEngine Desktop Central before build 100082 allows remote attackers to obtain control over all connected active desktops via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in ZOHO ManageEngine ServiceDesk Plus before 9.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Design/Logic Flaw

ZOHO ManageEngine ServiceDesk Plus before 9.0 allows remote authenticated guest users to have unspecified impact by leveraging failure to restrict access to unknown functions...

CVE-2016-4888

Cross-site scripting XSS vulnerability in ZOHO ManageEngine ServiceDesk Plus before 9.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4888

Cross-site scripting XSS vulnerability in ZOHO ManageEngine ServiceDesk Plus before 9.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-4890

ZOHO ManageEngine ServiceDesk Plus before 9.2 uses an insecure method for generating cookies, which makes it easier for attackers to obtain sensitive password information by leveraging access to a cookie...

CVE-2016-4889

ZOHO ManageEngine ServiceDesk Plus before 9.0 allows remote authenticated guest users to have unspecified impact by leveraging failure to restrict access to unknown functions...

Design/Logic Flaw

ZOHO ManageEngine ServiceDesk Plus before 9.2 uses an insecure method for generating cookies, which makes it easier for attackers to obtain sensitive password information by leveraging access to a cookie...

CVE-2016-4888

Cross-site scripting XSS vulnerability in ZOHO ManageEngine ServiceDesk Plus before 9.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...